lp:ubuntu/natty-security/quassel

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

79. By Felix Geyer on 2011-09-26

* SECURITY UPDATE: data and log dir are world-readable (LP: #846922)
  - Set permissions of /var/lib/quassel and /var/log/quassel to 750.
  - Set permissions of /var/lib/quassel/quasselCert.pem to 640.

78. By Jamie Strandboge on 2011-09-09

* SECURITY UPDATE: DoS in CTCP parser (LP: #845707)
  - debian/patches/security_fix-ctcp-parser-dos.patch: adjust for
    quotedReply to use QByteArray.append()
  - CVE-2011-XXXX

77. By Scott Kitterman on 2011-04-06

Fix up quassel-core.preinst to finish the /var/cache to /var/lib
transition (LP: #753080)

76. By Scott Kitterman on 2011-03-24

* New upstream bug fix release
* Move quassel-core data dir from /var/cache to /var/lib (LP: #713462)
  - Add quassel-core.preinst to move existing data
  - Update debian/quasselcore-makecert, quassel-core.postinst,
    quassel-core.postrm, and quassel-core.quasselcore.init for the new data
    dir location
* Increase startup time allowance in debian/quassel-core.quasselcore.init to
  reduce incidence of startup failures (LP: #480022)
  - Thanks to Ralph Janke for the patch
* Update configdir description in debian/mans/quasselcore.pod to not
  specifically mention SQLite since other database types are also supported
* Drop temporary versioning libindicate-qt-dev build-depend

75. By Jonathan Riddell on 2011-02-09

Rebuild with libindicate-qt 0.2.5.91-0ubuntu2 to fix dependency

74. By Jonathan Riddell on 2011-02-07

Build against libindicate-qt 0.2.5.91 for soname transition

73. By Scott Kitterman on 2010-09-21

* SECURITY UPDATE:
* References
* Upstream Git 0f2c520a76a468d3778e031ebde2d304048e1663
  - If we receive multiple CTCP requests in one PRIVMSG we now answer with
    one packed NOTICE containing all CTCP replies. This fixes a possible
    DoS Attack rendering Quassels IRC connection useless. Upgrading is
    strongly recommended. Thanks to Jima for reporting and supporting

72. By Scott Kitterman on 2010-09-14

Upstream bugfix update from 0.7.0 rc1 to 0.7.0 final

71. By Scott Kitterman on 2010-08-25

* New upstream RC release
* Add missing build-depends on libdbusmenu-qt-dev

70. By Scott Kitterman on 2010-08-11

* New upstream beta release
  - Add libqca2-dev to build-depends for blowfish support
* Switch to source format v3 (Quilt) to use .bz2 tarball
  - Drop build-depends on quilt and update debian/rules
  - Add debian/source/format